What security appliance for home?

[arcenite]

I was looking at the ZyWall UGS50 but it appears to have a limitation of only 30MBIT/s when intrusion detection is running. I have FiOS Quantum 75/35, so that device would severely limit my download speed, correct?

I have no need for any of the fancy VPN features or SSL, is there a device that meets my needs or do I have to shell out nearly $1000 for a device that can keep up with my download speed?

Thanks--Bill

 

[Dravic]

Depends on how handy you are.

You just have to make sure you using gigabit at your network edge now. I use old PC's for my firewalls built off of smoothwall (snort, clam AV, qos, ntp, dhcp, [multi IPs with Homebrew full firewall control mod]...etc) . really low specs needed...

I had to grab 3 gb nics [red, green and orange networks) from best buy when I couldn't get all of my Comcast business download speed [98 mbps fastest test so far].. nice that 100mb is finally becoming he bottle neck for internet connectivity.

I was using a temp router (netgear POS) for a couple weeks when unpacking.. when I got my smoothwall back in place i notice my speed test would top out @ 45-50mbps.. after seening 98mbps I realized the only thing that changed was my router. After replacing the nic's it all been great.

There really is no prosumer market for home security gear. You are stuck being technical enough to build your own (pfense, ipcop, smoothwall type people) with mods or you pay for entry level enterprise grade gear for $$$.

 

[Paperlantern]

I use a watch guard x10e through work for mine. we use the drag and drop VPN so I have a permanent connection to the office. Makes working from home VERY easy as well as minimizing time it takes to access the network if we have a failure that needs attention. If I did not have the watch guard I would likely be running pfsense on some older watch guard hardware or a low end, low power box with multihomed config like what Dravic uses for smoothwall.

 

[weovpac]

If you are able, you can build a pfSense box for ~250+[depending on your needs]. Install the packages you want/need, like Snort for IPS, etc..

 

[arcenite]

Thanks, All. I found out that Sophos has some free home software to use so I'm giving it a whirl, and even as easy as this is, I can't get it to work.

LAN -> Firewall -> Router -> ISP

The firewall is not routing my traffic to the router, and I can't figure out why. I know the firewall can access the internet because it recognized that there were updates available. How the heck do I get the firewall to pass traffic through? I disabled EVERYTHING including any firewall rules, added a rule for allow any/any/any but still no go. I have a feeling it's a NAT issue but I don't know anything when it comes to that.

Thoughts?

Weovpac: I have a box already for this, so I will try pfSense next.

 

[Douglaster]

Are you sure you want so much hardware and security ?

I mean, for todays standart, a home with NAT + M$ Security Essencials + a well configured router = Protected.

 

[arcenite]

There are several reasons I want to do it... 1-learn, and 2-it's hard to install ms security essentials on a $100 NAS

 

[Broheim]

+1 for pfsense, building your own box is really the only cost effective solution for your average mortal (although I can probably just steal some of sonicwalls when we replace them at work).

 

[BIGGDOG]

I like Sophos AKA Astaro. I am using it as we speak. I am not an expert on firewalls but I can tell you if you have a question someone will have the answer for you.
My set up is ver 9 and I have 6 computers running on it as well as a WII and an Xbox360.

The security is great.